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(54) LARGE-SCALE IPSec VPN CONSTRUCTION METHOD, LARGE-SCALE IPSec VPN SYSTEM AND 
PROGRAM, AND KEY SHARING INFORMATION PROCESSING DEVICE 

(57)Abstract: 

PROBLEM TO BE SOLVED: To enable IPSec (Security architecture 
for IP) communication using a key even if a fault occurs in a 
gateway where a key exchange is performed, in a large-scale LAN 
having a plurality of gateways. 

SOLUTION: When the key exchange based on IPSec is performed 
between the gateway of the large-scale LAN having a plurality of 
gateways and a gateway of another LAN, an Internet key exchange 
portion in the gateway of the large-scale LAN sets a key in an 
IPSec portion of this gateway, and requests a key transferring 
portion of this gateway to transfer the key. In response to this 
request, the key transferring portion transfers the key to a key 
transferring portion of another gateway in the large-scale LAN, and 
the key transferring portion of the other gateway sets the key in an 
IPSec portion of the other gateway by using this transferred key. 
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mm) 9&<d#- h^*-/**r*^a«LANK 

*>, I PS e ciift&orefci-fSo 

NCDy-b^W<t v -tOffeOLANOy- t 
<DmX\ I PS e cCCfc<b^<g|3aft^ftoti/cti^K: 
*5C>T % *88tLAN©y- h^WO)^ h 

ztcm&m^r. fl&©4r- h^W© I PS e cgp^a 
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N©y- b^^At. ^©ffc©L AN©y~ h^x A t 

x^X^^>^SB^, C<Dtf— b *J * ><© I P S e c 
&Cgll£S&?T5 C©y- h^x ^©gl3ki£SI$ 

WEy- by*A<DM$mmK fi/Eg^c^DT, flu 10 
IB^^&M LAN <Dj&<D tf— b 0 x ^<Dg^£9tttgi$^ 

ftEft©y- h ^ x <D8t(E2!«#, CCD^jH^ nt * 

/cgi£«t>T> UEfl&©y-h£x-f©i ps e c3P«c 

M93e*tf5Ci*»«ir**»llI PSec VP 
[M*H2] litEMESU:* 

lttE*»Mt LAN ONI E^- b V * -f #k ft E*«8t L 
AN©BuEflS©y- h^x A (CfiH£ai*B3jc^, 
«E»oy-h')*-f# 1 C©g#K:>tfLT, OKff-^- 20 

i^^mi*r^>if*ii i tewoxmm ipsec vp 

I «*B 3 J «TSE^B« LAN (Dm Ef6© y- h •? * 

-f ©oiEiiWjw, we*»«l a N©WEy- h v * -r 30 

*>?>«IEai«:SW4i. 8iTE{6©y- h£x-f© I PS 

e caBK:StaBS*ft ^ c ©fc*«rE*:#8t L 

flJK3&tt£f6©y- h^x-f «TEffi©y- h'Jx 
-YiEMSKc, s#© 1 PS e cmcmWtZft'} ±±i> 

c©Bt*WEy- bv*A<Dm&imic$n£L. 

WEy- bVxAtes (EaSftTfirfcttEfc**, *tZJK 

■Ti«*:311X«2BBttCD^I«I PSec VPN© 
flBRfrffi. 40 
[114094 ] WMCDtr- bV* -f *r«-r4*«8tLA 
N©y- h**-f ^-©ffe©L AN©**- h^xw' i 
©IHr. I PS e cJC*>i-^<«3aft3Wftotl*i, I? 
IE*£Hgt L A N 1*3© y- h ^ x ^ IB-C«MSai3&sff *>ti & 

PSec VPNWfArtot, 
^ > jr - * y h * ^ * ^ ^ * > 2>» CC J: 0 WE * © ft 
©LAN©y- h*5x>f &*3fcifc*fif 54ifc*C. CO 
-f>*-*y h+-x**^x>$'S|HC<J:»3 g#©I P 

g*L> C^(6jJS»^<fc5WE**l«LANOttCE)y 50 
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-h^x^ CCflMES *ff 9 OTE*«St LAN ©MB y - 

me*gM l a N©May- h * * -f * e> , 

«Ra**tf*iit*C, @#©I PSe cflHcftHC 
*ff 5MB**«L ANOffflEffcoy- h 9 *-f <b, 

MB*««L A NOltEy- h 9 x -f itwan*tf 9 ft 

iBtOftOLANOy- h ^x -Y i % 

MB^dMt L A NOWEy- b+fx-A M&ttKtt L 

AN©MBffi©y- h^*-* ME*©ffi©L A N© 

y- h * x ^ &9«sttt t * w-r * c i 

&-r£*SHI I PS e c VPN^fA. 
[»J#H5 3 mBMBSI** 

Me^&tt l a NoiMsy— h x # v mb^aw l 

A N ©MEffi© y- b V x W tCSIKJH L , 

*»WbbrWEy- h^x^tcigu, 
•raiifecc, HE«*nMKbur«E«©y- h^* 

Ut, WEy- F^x^K:OKfi#?:ilT*)lE*^tfC 
i*«F«i"r-5l«*3l4Ett©^a8t I P S e c VP 

[ 6 ] BJIE^BM LAN OffEffi© y- h x 
-f ©ME&ffatf. «TE*««L A NOWEy- h 9 x -f 

*»e>insat*«w*i, suEf&©y-h^x>r©i ps 

e cSP«:«R5£*tf5it*>«:, C©«*luE^ca«L 
AN©3 6tt4f6©y- h^x^OSiieiBIJCclESIL/, 
WIBS6ac*«©y- h£x>f fe, S5Efl6©y-h^x 
>TiBI«frc, g^©I PSec^m^M^i'ytth 
tc, c©H*B5Ey-h^x^©SiiEj|ISPtcKSIb, 

WEy- h^x-Ytt, KSHS#ir*/cBJE*l^ *fl!KC 

a »*«as l /c^u:-gc-r z> c t mm? zctzmkt 

TStt#J!4Xtt5Ett©*dBMtI PSec VPNV 
[ I 7 ] DEIEaWS , StJlEXJi^ LAN m ^> 

4^jjLL©y- b v x -f (c-^csrraaicctTfeti* ci^ 

4*«i-r4lll*3l6EtbD^«fllI PSec VPNV 

[ 8 ] MtE^affi LAN ©WEy- 

«E*©ft©LAN©y-b^*^*W3»*fT5 
ii^C ttE^ta«LAN©»Ey-h "5*^*5, mi 
IE^a«l LAN ©mTEffe©y- F^W (c«K*«rtf 

fuEA«« L A NOWEy- b V x A ocw«*5»4-rs 

a{i[5I^±©a^©;l/-^©tf$R$»0cJ:or, DTE* 

a«LAN ©«uEy- h ^ x a »©«as* , ute^w* 

L A N©WEf6©y- h ^ x A tc*f LT^t e> <fc 5 6Cgffi 



3 

ftuIE^f BLANCO** KcftLT, HuiE^OMfecDL A 

CDfficDL AN^y- h ^x >f#, CCD^y v b&Xy'-te 
MtLX, WIB^iaiLANCDWEy-h^x^jBeca 

mria^gmL a Nomizi&oy- b -5 * IftlS&fi 

mff 2*#I6£ LAN CD XFR <Di£fI S tlT * fc A 
m3&>tCffitt©^a« I P S e c VPNWA e 

CW3KS9] ^a«LANrtcc*jt»t:, a<gai*?T^ 

;*3Sg|I PS e cVPN^n^AtftoT, 

ffflBy- h^i^I PSec SB^C*t LTilS^^rtft? 

BJgEy- h ^x ^<DflM££BIUc % jiJfB^K«ILAN<Dffe 
coy- h * x 4 ©«M62l»«:#l/T«l6aS*tfto*. 

sna^«LANo«riay-h^*^oittEai»*s, a 

fcgl£ffll>T, WIBy-b^x-Y©] PS e cfflMCStL 
ra«^*tTt>ti-SCi*ll?f3*4fc«>cD^*i«I P 
Sec VPN^P^A. 

[«*3B i o ] «reMESt«. 

UlE^cfflSlL A NcOOTBEy- h 3 * A fc, SiJfE*#i8IL 
AN<DfulEffi<Dy~ h«5*-fCC»L/TfltlEi3l*«*S 

%Bf^t;Sli"CmrfEy- h *x -f tejg*P3-B\ 

3*4 WE«*»^hS*TlWBft©*'- h 

**toCi*»«4"S-iHI*3B9E«ll0^a*I PSe 

i] mrie^asiLANcowEy-h^x-r 
r#fc«*ffl^r, gyfEy- bVxAomfc&Sfttc. m 

8Ey-h^x«Y©I PSe c»lc»OTili«££?Tb-tf 
4<t<h4>ti: v lftiE*««LAN©3 6ft4tt©y- 
x >f (C»UTflHEaS*!ft>-tt* 
9X(<* 1 0 IEtt<3D^a« I P S e c VPN7*P^ 



(3) ^i20 03-6.9 59 7 

4 

[M#«l 2] I PS e cCC£4tt 

JSft * tf 5 BKC , fe tT 5 gift #fff «*&ggHT * 

* h*~x****>y«w, 8«gESi*wtii*R®a^s 

O I P S e c»Cc«BH£*tf 5 £ <t 4>&C, ItTBBfl^f* 

W fg^S^gCD I P S e c »tc«R3E«rff 9 C £ £4$tt 
4 -r 4il*W1»fB^iIilgo 

PSec. " VPNK:*»*y- h-Jx-rtftSCi^ 
«i-T4l»«3il 2 E«OS^tt««Hl*«. 

[0 00 1 ] 

20 -/**tS*a«LANi I P S e c tcj:4 VPN*« 
m?Zlc&tcK>. *3Hfti4*>«:«Eai*fT5C4K:J: 

ot, -gpcDy-h^x^^»w^*ur*>, iim^F 

tt±tt&ttt>*«SII PSec VPNSSSS, 
ilPSec VPNWA, ^jSilPSec V 

p n y ^ Aav«*wtfWRAawR*K:H-r & 

[0002] 

[t£*©3$fi5] IPSec (Security arc 
hi tecture for IP (Internet 

Protocol) ) tt«F3t©y>^iaraas«*^ 

30 wtscitciott+a Ufw *5tffil/Ti>4 a ccd 

8»«4**t4tea>tctt, a?St I K E (Intern 
et Key Exchange ; AZs& — %*y b ^ — 

±i pse era, W362#nnr-fe**y 
[0003] -^r, ^yit©*^ h7-^ttiro*aai 

&LANB, a»LAN^*6©il«t*WAti4fca6 

LAN^6<Da«3SS-BJ«ec&4. 
[0004]iC5#, IPSectS^ii, LAN 

j^SBltt— o©y- h^x>f icDraT-L^-fe+x y f* 

4 £ L A Nrt iOM #-C* ft < «C ^ r L 
Sot^c. ccDcfc ; 5ftFp^*ft?^'r4/c^k:, IPS 

iCDHT^f/'ctC I P S e ciiff ^f^^ffifti "fctf 

50 *rtl>4o 



5 

[0 0 0 5 ] 

ioa«fttf 5 C £ ©r.* £*£imL A N ©*Jja*«tt 
5Ci&<. I PS e cCC<t4*** y-^-f OttffiSrnJ 

[0 006] ±iSCD*««C^36i*&3tifc 
*>©r* 0 , fi£*© J: VcClPSec tcb W 
#»SU I P S e c tc <t S-fe+.a y f ©JISS tifcy 

LAN^60a«*"5JS6<!:-r4*a«I PSe c 
VPN (Virtual Private Netwo 
r k) mkWk. *mmi PSec VPN^fA, 
*Mm I P S e c VPN A&i>*S8^ra$R*Q: 

[0007] 

£> v *^0JCDIS^35 1 fB*SCD^C«^ I P S e c VPN 

*««LAN(D^~b^*-f©^>*-*? h 
*-x^*^x>^g|5#i, C<Z>y- h^x-TCDI PSe 

[0 0 0 8 ] **BK 1 PS e c VPNO»«*SS:C 
£=it:*-U JSRCCtt«£**ff otl^l^- h^x 
[0 00 9 ] C<Z>/c», H^^tTo/cy- h^x-fk: 

[ o o i o ] jwc, **w©ii»*3a2Ktto^a3K i p 
sec vpn onmism it. mama* ttm lan 
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■?x-rav c©ie#jb3nfcOKfi#s:tta6rsii*> 

h-5*-fk:OK«#«riSr*lli*db**6iLT*4. 
[0011] I PS e c VPNOiJWfttC 

if 5 L A N ©l*3»CC«3R© A - If aWJPfiE l/c4UTt, 

£ jWt ton 5 c £ * Hr±-r £ c £ #r * £ o 

[0012] ^*c; *mw<Dn&T33%m<DjMm i p 

Sec VPN<D««E*SW:, *««LAN©ffc©y- 
6«IB***W&±, h I PSe cW 

20 I PSe c»6CfiMa5£*ff5££*>CC> COft*^- F 

[0 0 13] *MU PSec VP.N©«**j**C 
. 3-&«±CD»^CCtt, fiHEaS*SWfcy- h ^x A 

»^>*«:«Kai*ff9ci*>pi«ia4. 

[0014] *»9§©l»*^4E«©^:a« I P 

Sec VPN^fAtt, aftoy-h'Sx^SrSt 
4*««tLAN©y- h^x-Yi, -tfiOfftOLAN"©^ 
- b^x^iOPtljr, I-PSe c«ct>i-?<l6tJH*sff 

fen^i, «l a Nfioy- f x r B it«^ 

ff*>ft**8Wt IPSec VPN^ntiot, 

^-^■^ h+-x^X^x>^SPtC«t0 a^OD I PS e 

C<D«<S»»«:J:0AailLAN©fl&<Dy- h^x 
-fCC«EaS«f 5*«StLANOy- h»5*-fi, 

-SiifeK:, S^cDI PS e c»«c««3t*ff5"*a« 
LANOfftoy-h^x-^i, ^iLANOy-h'? 
x A £M$i&Zft *> ^(Di&CD L A N©y- h ^ * A t % 
^MLAN^y-F'Jx^, ^d»8ILAN©f6(Dy 
50 -h^Wct, *OttOLAN©y- h ^ * -f SrSSBW" 
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Silff HSU 4 «r itilfiS 4 1/ 1 & 6 . 
[0015] I PS e c VPNJ/^fAtC© 

^1*4tt4fc«>. I PSe cSM:ffifeittft6tt<tt 

<E>o 

[ 0 0 1 6 ] *fc % «e3fc»*CC** <fc 5«C % Sflttflt&ft 

fttf ^CitCctoT, SEBJJl©y- h^x -r*»3c-r4 

So 

[0017] #tC, *»9!OI»*a5fatt<D*j»«t I P 
Sec VPN^fAtt, ftlfciiltt* *««LAN© 

o KMtUff t it y-' f •) * ^ «ca I , y-h 

■?x^#, C(Z>Ht#<b3tifeOKfi-^*«iS"r6ii<> 

- c©Kassnr*fcii*«acLr, y- 

h -j x -r o k &mz$t$ mm iit^. 

[0018] **B« I PS e c VPN^fA^C© 
t4#pJSB4&£« 

[0 0 19]^, *»9!OW*3H6'IBt8cr)^B« I P 
Sec VPN^fAtt, ^BlLAN©<6©y-h 
^x^©gt!|ta£Sitf^ ^IILAN(Dy-h^x^^6 
fiWEilS*SW*i, h^WCD I P S e cgJSK 30 

«K3E*tf 5iifeCC, CO«**«ILAN03 6ft 

y-h^x^&, {toy-F^x^», g#©i 

PSec»CcatB3E*1f5itfcK:, CCDft^y-hS 

Sfcftfts. «tBfcS##R»t,fcft«:— Srrst4«gi8 
T£#j£4l,T«>£o 

[0 0 2 0] PS e c VPN^fAiCO 

j: 9 ft«a«:rntf , ^iLANoy-h')*^^ 

3-&JiaJ:©tB^tc«, h -f 40 

[0 0 2 1 ] *»W©W*a7E»O^Siai I P 

Sec VPN^rAlt *«iLAN^ 
f £ 4#feLb©y- h $ x tcoi»ri51«tctf totiiflt 
#c4LT*£, C©«j£4tt, W^etcfcttSftR 

ftlSSJaofftOWBidtfftftlESS-riBRO— a© 
»■*»»**. *«StI PSec VPNJ/^fA* 

^x j>k^?z>m£-e$>~>rb, m&m*9:tttty-b 50 
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C4**aJ«4tt4. 

[0 02 2] C©i©£\ ftlBSfcSWfcy- h^x^ 

^CKteoy- h $ x -f (Cft1K&&|R&fT 5 4 l> o fc 
J:5CC, #Cca«©ftRaS*flt«WK:*»r4©*&6 

-./cy-F-JW 4ftraS*«Wfcy- F^W^f 

[0 02 3] #Ct, #A9i©IB#9[8IBttO^H8l I P 
Sec VPN^fAtt, *dft#tLAN (Dy- 
^4, *OffiOLANOy-h^A^3W)IS!»*tf5 4 
4fe.CC % *jjWLAN©y-h'Jx-f# 1 *«giLAN 
Oflt©y-h-5*^CCftRaS«rffC^ *»«LAN©y 

- h x >r K»#**#Mtr « 4 , a«®B±©a»© Ji/ 

5g©$SM£> *^LAN©fl!2©y~h^x^K*tLT 
?f5J:5CCffl»fl|«*s«jE3h. *»ftLAN<D*X h 

{g#JtrS*i*4, *©ffiOLANOy-h^*-f^ t 
(D^^rv Vi^^MtLX, ASILANOy-h'i? 

y- h^x>fcc^^n, ^aiLANoffe<Dy-h») 
x-m mmztitc^trv vom^v^Mt^^x, 

«LAN©W hfcSlfl U AJIILANOWF 

[0 0 2 4] ttSm I PS e c VPNh>X<rA£C© 

^/cy-F«)x>f{cBS^4lt*>, ft£ft*?Tofc 

K:ftR2l^ftonn**/c*, -ecDffiCDL ANCDffiCD^ 
Xh^6, *Of6©LANK:*56^*±8E«X»«:?fo/c 

y- h^x^^jgsur, ^«lan©** mc»l 
x>vrv b&mm zfttcm&ttt. jjB»»***£bfcy 

- h * *aisi u ftRasistwfcflsoy-h^*^ 

[0025] ^cc *mM<z>m*iM9Mm<D-*Mm 1 P 

Sec VPN^ny^Att, **8SILA NrttCfcl* 
r v igMtf^fflllPSec VPN7*D^7A 
riot, AiiLAN^-F')i^^>^^-; 

y- h«J*-{©-f>ir-*^ h^-x^X^x>i^SB 
tc 4 y-h^x^cDI PSe c»CC»bTftBBe*tT*> 

tf£44Mc y- h^*-f©ftKa»«c*tLrft(ia 
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9 

£g3R£ti\ x^<Di£lEi£§l$K:, **1S£LAN 

z&mcm&az. com^Mmc. si^t^/ci 

Srffll^T, y~h£W©I PS e c»K#t/C0HME 
£*Ttotf***i£4bT&*. 

[0 02 6] '^11 PSec VPN7'a^A?:C 

*C4rt*"C*Sft:** C<D<fc5ft»&K: I PS e cillf 10 
*a«©8iJiMiSaft*tT9 C 4 tc J: 0 jfBffloy- h * 

[0 0 2 7 ]^, *«H©m*3i 1 0Ett©*«« I 
PSec VPN^D^Att, A^I^LA 

[0 0 2 8 ] PSec VPN^P^AtC 

8HeaiB#K:*jW4fiaBa:4**RS±3 

[0029] &ct, ^zmon&m 1 1 iEtg©*«gi i 30 

PSec VPN^^Ai^ ^IILANOy-F 
F^x-TCD I PS e cWCCStl/TiMa^Stftoi** ' 

4 4 fete ^a«tL a n©s e>«c*fftoy- h 

ituraig^tftoif «>»^4 ut&& 0 

[0 03 0] I PSec VPN^P^AiC 

S&fcffe©*'- b^x^iM^£*Tto*£C4^ 40 
r*Sfc»* «ISiii©«l*{fc«:ia*C4*SpHfi4 3tc4. 
[ 0 0 3 1 ] ##HB©fll#:e 1 2 SBJK<Z>a**rlt 

Wfi9Ka«. a«Bj»*/M/T I P S e c JC«fc*«3t 

psec »tc«B8e* tf 9 4 4 cc . M^rw $8&a^ 
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T*fc»*fllC>T % ^**t»#R^a^g<D I PS e cS|5 

[0032] m&mmmkwgt&zcoj: 5 ftawwer 

a»*s«tSaft*tT?fcJl*K:». @JK>I PS e 

c »cc«iwe*tf 5 4 4 b ec % f&ofl^^tftBftSKflE 

I PS e c»CCBBE-r4C4*siWB4tt 

[0 033 ] ^LANftftC^t, CCD 

J: 5 MftVWWffiBSeKC: L A N?f 4<Dlf $g<Di*§{f 

[0034] S/c C(D<fc^%Si^1fl«teS^S«r. 
*81fltl PSec VPNJ&l^CCj£fflUTfe**to& 
^ Witt, -f>*-*v hi/a * tf>d/&4tc:tol> 

r, MB*****, 2^3 ^^cteW4*«w<D«ftWtt 

a^gtc »«3&5»* p r t % -e © jj!HB<E«ft wt#«^s 

4ft*C4*HF±r*C43OTI*S4tt*. 

[0035] ttvyowm 1 3is*£©giftwif 

«R&9SBt£. I P S e cVPN^^y- Y 

IlPSec VPNtcfcWS^-h^x-rccfc/c-li-i 
[0036] 

llMLTW^c 131 HK, **JB^»fic*5 
W^IIPSec VPN^rA©»^fy 

[0037] P^tC^T<t 5 JC, ^C«m IPSec V 
PN^fAtt, LAN A10, LAN B20S^ 
jim@«3 O^ltC^o LAN A10IS, mit<D 
y-h-?x>f^t^«LANt$>^t, 
WA1 (GW_A 1 ) 1 1 4^-h^x^A2 (GW 
_A2) 1 2f4*ltl^ 0 

[0 03 8 ] £tc> LAN B20&, ^(DifeCDLA N 

riot, -t©»Kccl#tc(WIB»tt^*«, y-h^x^ 

B (GW_B) 2 lf^Sltt^c cne>LAN A 
1 0 4 LAN B2 0 4ttafflltf3 0*^LTS«S 



XI 

[003 9]f Ut, Ctl6L AN A 1 0 i LAN 
B2 0#a{fT£tf:&/c9, I PS e c«li4'-fe*jx y 

Allli, y-F'JWB 2 1^ IKE(-Y>* 

D«*ft*TU ^Oi^ot I PS e ciiff^f 5„ 

[0 04 0] ccdrs, ^B6^J8cc*jorB. y-K£ 
y-h»J*-/Al 1 1^ y-h-Jx-fA 

2 1 2CC«ra£*fToT; -tCDfSy-h^x-TAl 1 
l{C»S*s«iLT*>, y-h'J WA2 1 2*CI P 
Sec MMB *fW 2-&*>Ct**]m£~?Z>o 

[oo4n ffiff a ^3 o t l-cb, se*&si<Dff;g$f 

drW5*-YAl 1 1 v ^-h^ai-fA 
2 1 2RO^'- h * ^ B 2 1 ^(D^ft-eftortStete 

[0 04 2] 3 e>tC, 3(11118 3 OB, A 

1 1 L y-b l 5x-^A2 1 h£*-YB 

[0 04 3] ^Kl, ^2£JBl>T, iiB^y-h^W 

«{coi^r t *©«iffi#JiliiifcK:»JHIK:BilBr 
-S. y-F^^-rAl 1 IB, IKEW11K IP 
S e cSPl 12, ®l£3MgPl 1 3*W0T^4. 
y-htf*-fA2 12fel5l«K:* 1KESU2 1, I 
PS e cSPl 2 2, 1 2 3*Wl/Tis!K 

F^x>fB 2 IB, I KESP2 1 1M I PS e^cgp 

2 1 2*WLri>5. 

[0044]f It, IKESP111**, I KESP2 1 

ft, IPSecSPl 12, I P S e c 352 1 2 &C§lfa;E 
5rtf5 (Xf^'l Do CC!)i$iiUttt, IKE 

or, fn-eno ipse csucc^aoa^Rjesn 

[0 04 5] ^K, H&SI^Mt ofcy- h^x^A 1 
1 1 CD I K ESP 1 1 IB, 1 1 3 fcgMEiSg* 

£fft> Uf^'l 2) , CCDSMS&SBl 1 3B, 
h^x>fA2 12 <DM$z&%$ 1 2 3 fcflHga&tfxS 
(^^13). ME»*3»fclMBS» 1 2 3 B, 
I PSe cSPl 2 2CcaRS*?f 5 (X7v7l 4) . 

[0 04 6 ] ccoi^tcrsciocctor, y-h^* 

^B 2 1 CD I PS e cSP2 1 2 B, h^WA 1 
1 KDlPSecSlil 12iIPSe cilff^tT^C 
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fc&oTfe, ^-h^x-f A2 12CDIPSecSBl 
2 2 <t I PS e ciHt£?T 5 C <ta*pjffi<fc&£> (Xr? 
7'15). 

[0 047 ] 0 3 £fflC>r , ±fB^^CD^S^ 

ilPSec VPN->Xf-A{c*5W*StKaS^o 
>fAl 1 lCDMSiSffil 1 3*5, y-h')x>fA2 

io i 2 cDgteiHgp 1 2 3 cc*r ur . messs*? & ( x 

f^20). 

[0 04 8] ChJCjfflT, gt$£££gpi 2 3B, SIlEi* 
SPl 1 3&cOKfi^£iIT (X«r^^2 1 ) o CCD££ 
©OK{f#B, I P S e cfcyiCD— «T**SIE#Hi-St 
ESP (Encapsu 1 at i ng Secur i t 
y Protocol) D Bf-ifffcSftTigftSft 

[0 04 9] O K«#«rS WcSiteSISP 1 1 3B, CCD 

20 CD^'- h^W A2 1 2 T*&£t<h ASSIST & Uf 
^'22) 0 ^Or, 1 3B, ^iEjUSffl 2 

3Kgtifki££t7 5 (Xf^23). 
[0 05 0] COiSrOil^-^fcBBEWIB-^E SPCC 
J;^tIPSecffl^ fl COct5ttBfr»fb*tT^ 
CiWot, LAN A 1 OrtCCSSCD^— Vifi&tE 

i^gpi2 3B, mm2ftx*tcm?-z<DW.mn^*& 

SI, a^-^SriiSofc©**®©^- h r> ^ A 1 

30 [0 05 1 ] *fttc, glls^SP 123 B, lESSn/cSI 
*ae><D«<S:UrH5e-i-*<bifeCC. gHEiHgRl 13&C 
Mlt, O Kfl-Sf ^rilf (^ff ^2 5) . C(DOKff. 
-SftCO^TB, #fcBffittBf#ESPK:J:4 I PS e c 

[0 05 2] #CCC. 0— XSt^ttOASlflt I P S e c 
VPNt^^^A(D*5ffi#JIHtCOli"C. H4&una5*# 

U f «MEaS*ttWr*fc«>©fe©'r*f3, 05 B, HfeSI 

40 h^*^3^S»Ufc»^tc, <b'CD J: 5(clPSec 

[0 05 3 ] ^ cn6©HK:*5l»r, Rl, R2, 
R3BiifiE«±6C#^L/, fhfny-h'Jx^B 
2 1, y-.f^x^Al 1 1 , h V x A A 2 1 

^cD««S^cD#^^:o^rB, H l tmWiX<hZ> 0 

[0 054] H4^CteCir, ^F-)WA1 

niy-h^wB 21 ©rar, «x»3Wf ton* 

i .y-^i-fAl 1 IB, 

50 F-)x^A2 1 2tC*fbT±aU/c<t^&*^>x- 
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[0 05 5]*^ HStCfc^T, y-h^WAl 
1 1&C»#**#E£U aff[Hl^ ; &^U/c:jlff^fx.^< 

otR2#cn«:B«f*4i*)^ RK R 3 CC^CD 
W*R*eS5U y-h^WAl 1 1 %<D±XQ»*>T 

v y-F»?*«(A2 1 2 Knsirr s <t s *i 

B8t»«^H*iE3n4 1 ) . 

[0 05 6] fit, LAN B2 OCCfctf*** h b 
(Host b)#, LAN A 1 OCCfctti** h a 10 
(Host a) OCjtl/C-r?*-? h^ff-T&i (^f* 
-^42) v y- h^x^B 21 tt, h% 
SBRot, iE»B#iH««: I P S e cO^^-teJWb* 
ffo-C Uf^43) , *«F3©Jl>-*R 1 

3htl>ifeft, fflfilHl«4ilofcAdr^ Hi, flBKHk 
^fo/c^h^i-fAl 1 ltB«c<, Si^W^v 

4) . 

[0 05 7 3 y- h-)WA2 12tt, y-b^ot-f 20 

b 2 1 tgp&-r2>mzt>r>xi,*htc&>, cn^ot 

ffcStlfc-^y* htt* y~h"5*-TA2 12&C<fco 
T\ b a&Cfei££ft& (^f*y^4 6 ) o C<£><£5 
y-h^WAl l lo»f«:fc^b6f, 
ha£*X h bBB© I PS e c»fittJaSrt"4. . 
[0 05 8] [»n*UBg»] *^0^CD^r.^SS 

0«0*«« I P S e c VPN i^X^ACD^^T 

Lr, LAN Aiotcfci^r, ■MEiSWMWclHrtoh 

[0 05 9] [5)g!K:;Trr<i: *^ftJBffio^:*B« I 
PSec VPN^fAOLANA10», y- h V 
WA1 11, y-h£WA2 12, y-htf* 

tfetCOC^rB. H1«:*JW4<>©4B«"C**. £T> 
y-h^x-YAl lUy-F^x^B 2 1ISti 
3Hft*5tf to*i* 4 (^f7 7'5 0) , y-h>5x>fAl 

1 IB, coaieetcBBS-r-SiifeK:, y-b^ 40 
x>f A2 1 2 &C;#LT£8$£i££*75o 
[0 06 0] F^^A2 12 

a6«B3e*tf9 4i*>CC, S&fcy- b**-f A 

3 i3&c*fLr, «(sai*tf5. for, y-F-?:* 

-YA3 13tt, ee>«R5E**T 5i ifefc, 184$ 6 
^F^>fAl llfc»«U y-h^x^Al 

51), 

[0 06 1 ] ftte, **»»JSfc4jl»rtt, LAN A 50 
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[006 2] v;l/^^ + ^ b (Mu 1 t i c a 

s t) I PSe c^ot, ^KiLAN©y-h')s 

*fc, eLhc^SBKM-Ctt. LAN B2 0A(C^ 
^W^foti^ifeC^^ LAN B2 0^ 

aa©y- b s * a **tr 4»^cc« lan a i o cc 

[0 06 3]Mt, Cti60Ktt»«l«:4lW** r -h 

4, Wtfct biters ^^^rffi^-r^lt 

(UttWtSfg^S^S) Kflll* 

[0 06 4] -eur, cOcfc^ttAasccov^fe* ±k 
*ftjB«tc*jc^r , y- b * * -f cDKt>o Kgt^wttfg 

*DffltR«*fflC*4C4CCJ:D, ISIttOfllJK (/c/cU C 
CDit^ LAN.A10tt^itft<HJ;^ ) 

[0 0 6 5 ] I PS e c VPN^fAKW 

©y- h«5*^^a*=3t"--rsci&cj:-p'r, msec 
»gi3^ * u r c» ft i *> fit scim 

5te«E>, WRpy-h^x-ftWrS^SIitaLANi 
I PSe c(cj:4VPN«r«»'r*K:*fc«J, -^O-SP 
coy- h £ *-iO»»tti*(cJ:*a(i^tt«:l»±TS C 
43W?I*4ft*. ^BBtLANrtoy-h**^ 

[0 0 6 6] ±B3©IOBI5J»CC*5W4fiMESIW*; 
<ilPSec VPN^ay^ACCiOWf StiS. C 
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>i*5BHHLfcy- f^wa i i k y->$*-r 

A2 1 2^tCi«Jl|3H3ti4o 
[0 0 6 7 ] &*>\ I PS e c VPN7*D^7 

£1*9 1/ , F-)WA1 lift iTCC^f SPg 10 

«Ffejitx5ittttfB«a«i*-c*-3r, cd- 
[0 06 8]^lt, BiWiftfiClBttStlAi^n^A 
tt, jr<ORAMCCO- FStlT, CPU&CJ: 

y-h^WAl ll,y-h^WA2 12fO 

Sec VPN^D^7A40-Ff5»^ {&<D^> 
t-*-$^&m2tltc*Mmi PSe c VPN7'd^ 
fflfils|3»*3pJfflL, , rea<Z>W"r4RAM-*>j1-8|J 

P- F3ftfc*3HS IPSec VPNP'P^Afc, 
[0 07 0] 

[»9ia>«i*3 eLL©J:9K:, *^BJ^cJ:ntf, ttfto 
h^x-Y%Wf 4^B«ttLANi IPSectcA 

£ {c J: £ ilfi^Ffcfc * BW: T * C <t ** r * £ . 40 
[0 0 7 1 ] KSaftOci-DTKacc^SAW* 

flb<D«ffll«:tt^r*#«:ft«r*s*#< . ^«b$cd2[e]?: 

[0 0 7 2 ] 3e>£. ^XrA^$itc1Slt5C 
iWfltJic Chit ^^^i'^-h^x-i 
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X'hZtcib, ^JSa&LANCCT^-fe^rifflKDLAN 

[0 07 3] C4>J:9&*y F7-*tt* — ffltc, lo 
LAN CC^tt©/jN«Sl LAN^7^*fe^«i 

1 PSe c/I KEtC»j£L/ciI»© IPSec y- 
F*x4*flH>4C±**C**l«, 

[0 0 7 4] *SKI PSec VPN^'a^ 

Alt 3>ta-*04^JflW*^BfJg©*B^*aS*c 

AJS^I PSec VPN^O^Ai^^t^-^i 

[01] JBBB«CC*$»**«SI I PS e 

c VPNt/XfA(7)M^T^ ? ^Ht*4. 
[02 ] *«W<D»-»t»»CC*JW5*a« I PS e 
c VPN^XfA©y- F «5 x 4<Dffife*fh-$*7v v 

CH3 3"#*d!©#*ll0B»«:*»**ail IPSec 
VPN^fA©g?Bi7 J ia F 3;l/©»ff*7S"rt6ff 

[04 ] *»ig(DSr— SB»J|$«K:*$W4^»« I PS e 
c VPN^fACDSiMST^a ? *H ( 1 ) "C$> 

[0 5 ] HS6JB««:*JW-5^ca« I P S e 

c VPN^fA©«tt*St^D-^B (2) r* 

[0 6 ] *^C0^-*ffi?I5«SCC*5W4^« I P S e 
c VPN^*^A<DME£^-f ? ^0T'£>£ O 

10 LAN A 

11 y-h^WAl ( GW A 1 ) 

12 y — h"Ji-/A2. ( GW_A 2 ) 

13 y-F-)x^A3 (GW_A3) 

14 *X ha (Host a) 
20 LAN B 

2 1 B (GW_B) 
22 ^XFb (Host b) 

3 0 mm @s 

3 1 JI/-^ 1 (R 1 ) 
3 2 ;b-£2 (R2) 
3 3 ;l—£3 (R3) 
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